Static task
static1
Behavioral task
behavioral1
Sample
4b642633a36a25817bd10003d5d4dea0.exe
Resource
win7-20231129-en
General
-
Target
4b642633a36a25817bd10003d5d4dea0
-
Size
100KB
-
MD5
4b642633a36a25817bd10003d5d4dea0
-
SHA1
66e64cc788ae62e354596207bf670be4a6882c49
-
SHA256
db2224fd25fb45150d7033001ff2ea90da3fd56d8a3f1d99f1f3fab14705fe09
-
SHA512
cc47e3e65fa5aca36a092af0f489574ec157fbae3f6fa06dbb4de4c0e794dc8ce2c4e6286d48d8b32c8b0d457b6ca8e22442e34ef79322a3aa960d30ca8fff94
-
SSDEEP
3072:gi9cmKEV+l7/qlNPQ6Qpmj2dDqSGVk8jwaaHw7Koj4rDMN0:gicUWrqfPnumjkDqSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b642633a36a25817bd10003d5d4dea0
Files
-
4b642633a36a25817bd10003d5d4dea0.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE